Skip to content
fr Sign in
8.2 High

CVE-2025-53652 Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to…

Description

Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.

Affected products and versions

Product Affected versions Fixed in
Jenkins Git Parameter Plugin Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Jenkins Git Parameter Plugin

The 6 CVEs of Jenkins Git Parameter Plugin →
CVE-2026-57286 A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with… 4.3 Medium CVE-2022-29040 Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views… Not rated CVE-2020-2238 Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters'… Not rated CVE-2020-2112 Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a… Not rated
Track this CVE